Discover-Tech ads reached sensitive Australian networks

Independent

Citizen Lab reported Discover-Tech advertising impressions on ANSTO, electricity-company and other Australian government networks. Researchers described ads that reported device information and could receive infection-enabling code for selected targets without a click.

Why it matters: For security leaders, advertising creates exposure through both auction data and code running when ads load. About 76.7 percent of Discover-Tech's bids concerned mobile-app ads, where browser ad blockers offer no protection. Browser filtering therefore covers only part of the reported delivery mechanism.

Decision: For organisations relying on browser ad blocking, assess whether advertising connections from mobile apps are also covered by their filtering controls.

What remains uncertain: Impressions do not establish targeting or infection. ANSTO reported no identified impact. Australia was not among the nine countries where Confiant observed handoffs to Candiru systems. Citizen Lab's data covered only part of Discover-Tech's activity over a limited period; its underlying report was not supplied.

Read: Reported article: Australian gov, media networks reached by Israeli firm's spy ads - iTnews

No linked primary source could be read; claims rely on the reporting above.

Compromised Shopify extensions redirected shoppers and interrupted trading

Independent

Logbase said unauthorised access to an internal Selleasy tool enabled malicious scripts in merchant settings on 13 October. HulkApps disclosed a similar extension compromise. WAGD's owner reported closing after a customer encountered a fake checkout, then receiving continued closure advice despite reported code removal.

Why it matters: Developer Roman Zipp documented HulkApps extension code intercepting checkout clicks and redirecting shoppers to lookalike payment pages. For merchants, this creates potential customer-information exposure and trading interruption. WAGD's experience shows that reported technical cleanup did not immediately resolve permission to reopen.

Decision: For an affected merchant instructed by Shopify to remain closed, obtain updated reopening guidance rather than treating the developer's code-removal confirmation as clearance.

What remains uncertain: The supplied reporting does not establish total affected-store numbers, information submitted to fake checkouts or WAGD's losses. Logbase said some browsers blocked redirects. Zipp found the HulkApps script fired once per session, so a clean repeat visit would not establish removal. WAGD's closure was reported on 16 October; the supplied 19 October reopening update is outside this brief's cutoff.

Read: Reported article: Shopify tells Australian store to stay shut after hijacked extensions divert shoppers - iTnews

No linked primary source could be read; claims rely on the reporting above.

Reported refrigeration attacks caused physical damage

Independent

The Register reported that attackers compromised remote-controlled refrigeration systems across hundreds of French grocery stores, raising temperatures, spoiling food and sparking fires. It also reported an August ransomware incident affecting a Canadian hospital's door access, central HVAC monitoring and staff access-card issuance.

Why it matters: For facilities operators and technology leaders, these reported consequences extend the recovery problem to temperature control and building access. Restoring information systems alone may therefore be insufficient to restore usable facilities or prevent inventory losses.

Decision: Where operations depend on remotely controlled refrigeration or building access, include loss of those functions in continuity exercises.

What remains uncertain: Underlying incident documents were not supplied, and the French attacker remained unidentified. The article does not establish a common cause across these incidents. Dragos's broader industrial attack counts include criminal claims and do not establish control-system compromise; expert forecasts about AI-enabled attacks are not measured outcomes.

Read: Reported article: Cybercrims go beyond stealing data to attack physical building systems

No linked primary source could be read; claims rely on the reporting above.